Keysat
97ed07fd07
Removes the one-time `/data` snapshot from the deployed Docker image now that the cutover from the legacy `workout-log` package is verified done (v1.0.0:1 + :2 in production). Dockerfile - Drops `COPY start9/0.4/seed/data /app/seed/data`. - Drops the `WORKOUT_BAKED_SEED_DB_PATH` env var. - Comment block explains the rationale + how to re-seed if ever needed. docker_entrypoint.sh - Step 1 collapses to single-branch fallback: if /data is empty AND /app/prisma/data/app.db exists, copy the empty-schema fallback. The baked-seed branch is gone. - Comment cross-references v1.0.0:3 for the rationale. start9/0.4/seed/README.md rewritten to reflect historical-only status + how to re-seed for the rare "spin up another instance with this history" case. Version graph - Adds startos/versions/v1.0.0.3.ts with empty up/down migrations and release notes. - Promotes v1.0.0:3 to `current`; v1.0.0:1 and :2 move to `other` so hosts on either upgrade in place. No schema changes, no data migration. /data on existing installs is left exactly as-is. Image size drops by ~1.7MB (the snapshot size).
102 lines
4.3 KiB
Docker
102 lines
4.3 KiB
Docker
# syntax=docker/dockerfile:1.6
|
|
#
|
|
# Proof of Work (proof-of-work) — StartOS 0.4 package image.
|
|
#
|
|
# Build context: repo root (see manifest.images.main.source.dockerBuild.workdir
|
|
# which is set to '../..' so all COPY paths below are repo-root-relative).
|
|
#
|
|
# This Dockerfile is self-contained: it references only files under
|
|
# `proof-of-work/` (the upstream app) and `start9/0.4/` (this wrapper).
|
|
#
|
|
# Data preservation (v1.0.0:3 — post-cutover):
|
|
# - The image NO LONGER bakes a /data seed. The one-time cutover from
|
|
# the legacy `workout-log` package happened in v1.0.0:1, was verified
|
|
# in v1.0.0:2, and /data on the live host is now the sole source of
|
|
# truth. Removing the baked seed from the image eliminates any
|
|
# possibility of a future bug accidentally overwriting live data.
|
|
# - docker_entrypoint.sh's seed-copy branch is stripped to match.
|
|
# - The empty-schema fallback DB at /app/prisma/data/app.db is kept —
|
|
# it's still useful for brand-new sideloads on a host that has never
|
|
# had proof-of-work installed before. The build-time `npm run db:seed`
|
|
# populates it with the curated exercise library + admin@local user.
|
|
# - The seed snapshot itself stays on disk under start9/0.4/seed/data/
|
|
# as a historical artifact; it's just not COPYed into the image. If
|
|
# you ever need to re-seed (e.g. spinning up a new instance with
|
|
# pre-loaded history), reintroduce the COPY line and rebuild.
|
|
|
|
FROM node:20-alpine AS builder
|
|
|
|
WORKDIR /app
|
|
|
|
# openssl: Prisma engine runtime
|
|
# python3 + make + g++: native node-gyp builds (bcrypt). Even when the
|
|
# `bcrypt` npm package ships musl prebuilts, a postinstall fallback
|
|
# compile is the safety net — no compile, no boot.
|
|
RUN apk add --no-cache openssl python3 make g++
|
|
|
|
COPY proof-of-work/package.json proof-of-work/package-lock.json ./
|
|
RUN npm ci
|
|
|
|
COPY proof-of-work/ ./
|
|
RUN npx prisma generate
|
|
|
|
# Build a fallback empty-but-schema-correct DB. Used by docker_entrypoint.sh
|
|
# only when /data has no app.db AND no baked seed is available (i.e. after
|
|
# v1.0.0:2 strips the seed). Seeded with the curated exercise library via
|
|
# `npm run db:seed`, so a brand-new install still gets the full library.
|
|
RUN mkdir -p /tmp-seed \
|
|
&& DATABASE_URL=file:/tmp-seed/app.db npx prisma db push --skip-generate \
|
|
&& DATABASE_URL=file:/tmp-seed/app.db npm run db:seed
|
|
|
|
RUN npm run build
|
|
|
|
FROM node:20-alpine AS runner
|
|
|
|
WORKDIR /app
|
|
|
|
RUN apk add --no-cache dumb-init curl openssl sqlite \
|
|
&& addgroup -S nodejs -g 1001 \
|
|
&& adduser -S nextjs -u 1001 -G nodejs
|
|
|
|
ENV NODE_ENV=production \
|
|
HOSTNAME=0.0.0.0 \
|
|
PORT=3000 \
|
|
WORKOUT_DATA_DIR=/data \
|
|
WORKOUT_DB_PATH=/data/app.db \
|
|
WORKOUT_FALLBACK_SEED_DB_PATH=/app/prisma/data/app.db \
|
|
WORKOUT_LIBRARY_JSON_PATH=/app/prisma/exercises.seed.json
|
|
|
|
# Next.js standalone runtime bundle
|
|
COPY --from=builder --chown=nextjs:nodejs /app/.next/standalone ./
|
|
COPY --from=builder --chown=nextjs:nodejs /app/.next/static ./.next/static
|
|
COPY --from=builder --chown=nextjs:nodejs /app/public ./public
|
|
COPY --from=builder --chown=nextjs:nodejs /app/prisma ./prisma
|
|
|
|
# Native bcrypt binding. Next.js standalone tracing usually picks up
|
|
# the .node file but we copy explicitly as a belt-and-braces guard —
|
|
# bundling failures here surface as auth being silently broken at boot.
|
|
COPY --from=builder --chown=nextjs:nodejs /app/node_modules/bcrypt ./node_modules/bcrypt
|
|
|
|
# Empty-schema fallback DB. Used only on brand-new sideloads where /data
|
|
# is empty and no admin user exists yet. Build-time `npm run db:seed`
|
|
# populated it with the curated exercise library + admin@local. Existing
|
|
# installs always have /data/app.db so this branch never fires.
|
|
COPY --from=builder --chown=nextjs:nodejs /tmp-seed/app.db /app/prisma/data/app.db
|
|
|
|
# (v1.0.0:3 removed the COPY of start9/0.4/seed/data into /app/seed/data.
|
|
# The baked cutover seed served its one-time purpose during v1.0.0:1's
|
|
# cutover and is no longer needed; eliminating it removes any chance of
|
|
# a future bug overwriting live /data.)
|
|
|
|
# Container entrypoint and diagnostic healthcheck
|
|
COPY start9/0.4/docker_entrypoint.sh /usr/local/bin/docker_entrypoint.sh
|
|
COPY start9/0.4/healthcheck.sh /usr/local/bin/healthcheck.sh
|
|
|
|
RUN chmod +x /usr/local/bin/docker_entrypoint.sh /usr/local/bin/healthcheck.sh \
|
|
&& mkdir -p /data \
|
|
&& chown -R nextjs:nodejs /app /data
|
|
|
|
EXPOSE 3000
|
|
|
|
ENTRYPOINT ["dumb-init", "--", "/usr/local/bin/docker_entrypoint.sh"]
|